Need exclusion for Defender Exploit Guard Network Protection

  1.    4 Weeks Ago #1

    Need exclusion for Defender Exploit Guard Network Protection


    I have a configuration where the Defender Exploit Guard Network Protection needs to be enabled. Recently an MS update must have changed what triggers this protection and I now have 2 custom applications that no longer launch properly.

    An acceptable solution is to add exclusions for the offending applications.

    I have been trying to add an exclusion for these application but without any luck. The only way to get the applications to work is to disable the feature through gpedit. Here the option:

    "Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus\Windows Defender Exploit Guard\Network Protection\Prevent users and apps from accessing dangerous websites"

    These are standalone Win10Pro machines running version 1803. I've tried the following:

    1) Using gpedit, adding the application exe and path to
    "Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus\Exclusions\Path Exclusions"

    2) Using Defender Security Center - App&browser Control - Exploit protection settings - Program Settings
    Adding each application and then disabling ALL system options.

    I'm kinda stuck at the moment and I'm hoping I'm missing something.

    Thanks,
    Dave
      My ComputerSystem Spec

  2.    4 Weeks Ago #2

    Hi, for what it's worth, this is the relevant tutorial, I think:
    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 | Tutorials

    Whether it will add anything I'm not sure, though.
      My ComputersSystem Spec

  3.    4 Weeks Ago #3

    Controlled Folder Access is already disabled. Thanks for the suggestion.
      My ComputerSystem Spec

  4. Infrasonic's Avatar
    Posts : 132
    W10 Home 1803 / Virtual Box / Linux Mint VM
       4 Weeks Ago #4

    When you whitelisted the app.exe file paths did you restart (not shutdown) afterwards?
    Shouldn't need to but maybe there's something not clearing properly like a cache.
      My ComputersSystem Spec


 

Related Threads
Source: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Interpreting-Exploit-Guard-ASR-audit-alerts/ba-p/228366
Solved Windows Defender Exploit Protection problem in AntiVirus, Firewalls and System Security
Hi guys, For some strange reason my System settings tab is not there in my Exploit Protection settings, only Program settings is visible. Any suggestions on what is happening?
How to Enable or Disable Windows Defender Exploit Guard Network Protection in Windows 10 Network protection is a feature that is part of Windows Defender Exploit Guard starting with Windows 10 version 1709. It helps to prevent users from using...
Does Windows Defender Exploit Protection log anywhere? in AntiVirus, Firewalls and System Security
I've used EMET quite a bit in the past. I recently started using the Fall Creators Update "Exploit Protection" feature. I have the settings as aggressive as possible, and I'm not changing them. This post is not asking what Exploit Protection...
Source: Moving Beyond EMET II - Windows Defender Exploit Guard Defense
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:02.
Find Us